This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa
File: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (raw, json)
Hash identifier: y07yi3J6Aa7eEJGzw1k5V3IUk9jp0TMK1pgfx7x0M/A=
Subject key identifier: F4:E1:CB:4E:B4:5F:DC:C9:B0:81:81:0F:A5:1C:7E:94:24:9E:7A:92
Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Certificate serial: 0456
Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa
Signing time: Thu 04 Dec 2025 23:06:46 +0000
ROA not before: Thu 04 Dec 2025 23:06:46 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147314
IP address blocks: 103.174.214.0/23 maxlen: 24
2400:1620::/32 maxlen: 32
2400:1620:c000::/35 maxlen: 35
2400:1620:c000::/48 maxlen: 48
2400:1620:c001::/48 maxlen: 48
2400:1620:c002::/48 maxlen: 48
2400:1620:fa01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Validity
Not Before: Dec 4 23:06:46 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69321406-c6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:67:fc:a4:0f:e9:1a:1d:14:96:a2:8f:d2:
15:99:82:89:32:fd:d9:5c:36:02:db:5a:e5:b9:e1:
34:18:b5:e6:59:1d:0d:5c:82:bd:f3:9b:e1:ee:9d:
d4:93:2f:42:92:35:64:46:65:5a:47:fc:2e:53:22:
3d:45:7d:d8:6e:ba:41:38:a1:1d:8b:57:eb:8c:ea:
95:e6:f5:93:89:db:e5:83:8b:74:a5:af:1d:6a:ff:
0a:48:0c:ef:1c:38:2d:e1:e3:e3:f6:1d:9e:ac:ee:
75:7f:44:37:b3:56:85:91:fa:f3:e0:bb:4f:28:a0:
1f:4e:0b:f4:ff:7a:67:37:f1:e9:23:44:49:a8:a9:
1d:5b:42:8a:42:c3:b1:3d:26:c5:3b:cc:40:4c:9f:
d4:f4:63:0d:0a:c9:e7:80:29:ba:9c:41:3f:ef:2c:
bb:76:cd:07:67:bd:89:7e:89:90:d8:dd:1f:aa:95:
69:d4:1c:a2:39:99:34:f1:eb:a7:dc:bb:76:c0:dd:
e4:f7:35:06:44:ad:21:7c:f6:7f:5e:03:88:01:3d:
21:28:e7:7e:eb:51:66:34:67:13:af:26:27:b7:d3:
ac:33:c1:9b:6b:11:e8:93:2d:ec:1c:b9:2d:9e:dd:
4e:e0:a5:35:49:9d:e1:26:c7:ec:f0:cd:e7:15:71:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E1:CB:4E:B4:5F:DC:C9:B0:81:81:0F:A5:1C:7E:94:24:9E:7A:92
X509v3 Authority Key Identifier:
keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.214.0/23
IPv6:
2400:1620::/32
Signature Algorithm: sha256WithRSAEncryption
13:9a:20:f3:75:90:3b:ab:11:2b:12:2e:d1:ee:b3:6c:ef:66:
95:76:d2:93:80:dc:f7:b4:ea:bf:58:0f:e3:8e:e5:18:3d:1e:
ef:c8:32:0d:e6:8a:c7:9a:56:fd:93:4c:58:8d:b6:e6:76:ef:
d0:a9:2b:9b:33:8e:55:eb:06:05:d5:7a:02:b5:27:aa:d5:cc:
61:b2:d3:f9:8e:98:07:f2:7a:29:d9:60:76:2c:0d:a1:9f:1a:
9c:27:14:c8:57:c0:ba:c1:ed:dd:8b:d3:2d:6d:f6:45:e7:52:
53:19:c0:71:42:f6:6c:23:59:2a:17:35:fd:08:ca:08:79:ab:
02:3b:5a:2b:fe:1d:73:c7:af:63:5c:53:bc:76:ff:c2:cb:e1:
ae:7f:0a:cc:ae:92:2a:42:8d:95:f9:2a:c2:d9:56:e4:11:9a:
05:0f:df:cb:7d:0d:f3:c1:cf:10:69:67:1b:98:d1:0a:0d:cf:
c6:bb:e6:f8:f5:78:d0:9c:9a:6e:92:5a:a0:aa:b3:96:19:90:
8b:3f:a7:d4:a4:74:ad:aa:f0:48:66:98:73:3d:6d:2c:ed:49:
3e:17:63:a9:2a:d6:7b:cb:30:b9:83:44:0d:47:8e:a7:ba:3d:
a9:ee:c1:f7:4d:9c:ab:0c:46:24:66:11:2b:2b:bc:06:12:ff:
ba:f4:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:56:10 2025 by rpki-client